This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier: m3a04jFNVcU/5PNkFb07qjoYokNdCDVdRVWyn2emQJE=
Subject key identifier: A9:99:B3:B6:98:4A:03:59:3C:F4:2D:A3:90:20:D4:58:DE:75:E1:E6
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial: 64F4BEF24D3CD8A0C6D6A50454DE0F5BE88E8A88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number: 0350
Signing time: Fri 05 Dec 2025 18:40:46 +0000
Manifest this update: Fri 05 Dec 2025 18:35:46 +0000
Manifest next update: Mon 08 Dec 2025 21:02:46 +0000
Files and hashes: 1: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=)
2: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=)
3: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=)
4: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=)
5: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=)
6: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=)
7: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=)
8: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=)
9: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=)
10: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=)
11: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=)
12: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=)
13: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: 4PdlAXV2pkavDhCmoDVimYe6Lqv1AqkxNRQy1o8Aj94=)
14: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=)
15: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=)
16: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=)
17: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=)
18: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 21:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f4:be:f2:4d:3c:d8:a0:c6:d6:a5:04:54:de:0f:5b:e8:8e:8a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Validity
Not Before: Dec 5 18:35:46 2025 GMT
Not After : Dec 8 21:02:46 2025 GMT
Subject: CN=A999B3B6984A03593CF42DA39020D458DE75E1E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:14:5d:41:b5:3d:4e:8c:8a:eb:31:b3:fd:
00:ca:17:45:8a:c5:62:59:d1:65:d8:5a:17:09:96:
99:d8:b8:41:d6:a1:a4:86:e8:4f:ca:84:c9:a8:52:
2a:6e:c7:72:12:1e:0a:04:d9:0b:23:02:6d:62:b6:
2f:5e:19:d0:00:a9:33:42:0b:9f:9c:3a:ec:33:ad:
94:ab:93:54:01:3e:45:6e:4a:db:9e:d6:02:ea:75:
49:d4:75:25:85:b2:3f:a3:da:01:18:41:ce:7b:f4:
55:9d:bf:18:a9:33:64:f0:af:50:9e:19:47:c1:65:
ad:5b:63:77:3f:e3:1e:7c:2e:91:f3:64:a9:0c:7b:
61:62:80:b3:e7:9f:fe:88:35:da:fd:f1:08:10:09:
5d:8d:a5:d6:44:7a:a7:12:89:1e:c0:1c:82:b5:03:
b3:b2:2b:30:a5:f9:a5:e8:e6:b1:3c:1e:1e:9c:8b:
0a:bc:a5:01:0f:ae:e8:b0:81:1b:6b:86:b4:a6:cb:
8e:c4:2d:22:e8:a4:95:7b:b9:d6:c7:3c:b1:94:55:
89:1e:ee:a3:3a:07:0e:47:a8:fa:24:e4:7f:37:a5:
a6:d1:31:38:24:0b:ed:bd:d2:ee:c5:1b:21:55:52:
25:a6:6f:1b:09:32:82:c3:3c:f7:0a:1c:52:54:dd:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:B3:B6:98:4A:03:59:3C:F4:2D:A3:90:20:D4:58:DE:75:E1:E6
X509v3 Authority Key Identifier:
keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:3e:fb:11:55:81:d4:5b:45:aa:4f:14:5b:90:c7:aa:9d:
2b:a0:4d:b6:d1:e8:e3:cf:46:57:3e:80:25:7c:6d:17:71:e3:
3e:82:70:0f:52:cd:52:d5:6c:22:d9:38:dc:42:dc:e6:5d:cd:
60:ad:61:b7:8c:5d:dd:b9:a0:45:f9:07:05:05:97:8c:d4:0d:
33:93:10:19:31:7d:52:84:25:08:de:da:5c:13:da:3f:fe:99:
ae:30:f8:fe:b9:0f:b8:37:6d:5f:61:ea:8e:8e:1e:e6:c9:78:
1a:66:77:f5:77:02:c6:51:cb:41:d6:6d:23:b3:f6:7d:5a:05:
bf:40:e8:45:32:16:ee:69:fe:82:5d:3f:6b:ef:3e:b4:c5:15:
3a:a2:ba:8c:96:02:17:57:af:32:35:97:0d:d6:b9:7a:fd:b8:
d5:32:65:6d:68:dd:f1:48:9c:8a:0e:4e:80:0d:99:95:32:57:
84:22:91:9b:ff:4d:38:fc:62:8f:00:22:8e:02:e4:7b:c5:9d:
da:be:bd:57:2c:b9:4c:a6:42:20:8a:b1:ff:74:5a:11:52:b9:
94:07:95:8f:ec:33:25:f3:27:1d:2c:21:29:64:73:d0:bf:0d:
28:86:14:1d:95:46:ed:eb:ff:fb:60:1e:d3:63:40:a7:09:86:
b0:10:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:41 2025 by rpki-client